security/vuxml: Document irc/znc issue

Security:	CVE-2019-9917
This commit is contained in:
Danilo G. Baio 2019-03-31 13:50:45 +00:00
parent 037d81d118
commit 76b6465ee5
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=497423

View File

@ -58,6 +58,33 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="b22d6d4c-53b9-11e9-9310-28d244aee256">
<topic>znc -- Denial of Service</topic>
<affects>
<package>
<name>znc</name>
<range><lt>1.7.3</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Mitre reports:</p>
<blockquote cite="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9917">
<p>ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial
of Service (crash) via invalid encoding.</p>
</blockquote>
</body>
</description>
<references>
<cvename>CVE-2019-9917</cvename>
<url>https://wiki.znc.in/ChangeLog/1.7.3</url>
</references>
<dates>
<discovery>2019-03-21</discovery>
<entry>2019-03-31</entry>
</dates>
</vuln>
<vuln vid="fe7e322f-522d-11e9-98b5-216e512dad89">
<topic>Jupyter notebook -- open redirect vulnerability</topic>
<affects>